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Dear Minister: 


In accordance with the provisions of Section 72 of the Privacy Act, the Canadian Radio- 
television and Telecommunications Commission hereby submits its annual report for the 
year ending March 31, 2011 for referral to the Standing Committee on Justice and Human 
Rights. 


Yours respectfully, 


LAN, 


Robert A. Morin 
Secretary General 
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Introduction 


This report was prepared pursuant to section 72 of the Privacy Act (the Act) and will be 
tabled in Parliament in accordance with the Act. 


In its day-to-day operations, federal government departments and agencies collect 
personal information from almost all Canadians. The Privacy Act gives Canadian citizens 
and people present in Canada the right to have access to information about them that is 
held by the federal government. It also protects against unauthorized disclosure of that 
personal information. In addition, it strictly controls how the government will collect, use, 
store, disclose, and dispose of any personal information. 


CRTC Mandate and Responsibilities 


The Canadian Radio-television and Telecommunications Commission (CRTC) is an 
independent public authority and reports to Parliament through the Minister of 
Canadian Heritage. 


The CRTC mandate is to regulate and supervise the broadcasting and 
telecommunications industries in accordance with the policy objectives set out in 
sections 3 and 5 of the Broadcasting Act and in section 7 of the 
Telecommunications Act. 


The Broadcasting Act seeks to ensure that all Canadians have access to a wide 
variety of high-quality Canadian programming. 


The Telecommunications Act seeks to ensure, among other things: that increased 
reliance on market forces for the provision of telecommunications services is 
fostered; that regulation, where required, is efficient and effective; and that 
Canadians have access to reliable telephone and other telecommunications 
services at reasonable prices. 


Objectives 


In carrying out its responsibilities in both broadcasting and telecommunications, the 
CRTC must act in the public interest consistent with the statutes under which it 
operates. Through its public proceedings the CRTC ensures its sensitivity and 
responsiveness to the public. The CRTC makes sure to incorporate public input into 
its policy formulation. Participation by Canadian citizens in our public proceedings is 
considered very important. 


Complaints of a broadcasting nature received by the CRTC are generally forwarded 
to the specific licensee for response and are then placed on each licensee's public 
file prior to the public hearing at which their licence renewal application is 
considered, with the exception of those complaints that are resolved through the 
Canadian Broadcast Standards Council. Anyone can consult these files upon 
request. 


Complaints of a telecommunications nature should be directed to the telephone 
company directly. If not satisfied, complainants may file a complaint with the 
Commissioner for Complaints for Telecommunications Services (CCTS) if their 
service provider is a member, or with the CRTC where appropriate. 


The CRTC web site (http:/Avww.crtc.qc.ca) offers public access to public documents 
related to public proceedings, including Notices of consultation, Decisions, 
Information Bulletins, Orders and Regulatory Policies. 


Administration 


The Access to Information and Privacy (ATIP) Office is located within the Information 
Management section of the Information Management and Technologies Directorate. 

The ATIP Office currently has three employees. Their functions are shared between the 
fulfillment of the CRTC’s obligations under the Privacy Act and the Access fo Information 
Act as well as the management of information policies at the CRTC. 


The Secretary General and the ATIP Coordinator have delegated authority to oversee 
the administration of the Act within the CRTC and to ensure compliance with the 
legislation. Copies of the Delegation Order can be found in Appendix A. 


During the 2010-2011 reporting period, the ATIP office developed a Privacy 
Management Framework (PMF). The objective of the PMF is to outline the way in which 
the CRTC develops policies and procedures to distribute privacy responsibilities, 
coordinate privacy work, manage privacy risks and ensure compliance with both the 
Access to Information and Privacy Acts. The development and approval of the PMF is an 
ongoing initiative that will be carried on during the 2011-2012 reporting period and 
reported upon at a later date. 


Education and training 


During 2010-2011, two training sessions were offered to 25 employees, providing 
them with an overview of the Access to Information Act and the Privacy Act, anda 
better understanding of their obligations and the processes within the CRTC. 


Two other more targeted training sessions were offered to 27 employees, providing 
them with an overview of legislated Privacy requirements and secure information 
handling practices. Upon request, informal information sessions were also given to 
Commission staff on the ATIP process and roles & responsibilities, specific Privacy 
considerations, as well as various Information Management (IM) considerations. 


information holdings 


A description of the Specific Classes of Records held by the CRTC can be found in 
the following publication for 2010, Info Source: Sources of Federal Government 
Information. The CRTC does not have any exempt banks. 


Info Source can be accessed through public and academic libraries and constituency 
offices of federal Members of Parliament as well as on the Internet at 


http://www. infosource.gc.ca. 


Requests received under the Privacy Act 


During the reporting period from April 1, 2010 to March 31, 2011, the CRTC 
received one request under the Privacy Act. This request was brought forward to the 
next reporting period. 


Use and disclosure 


Through training and information sessions, CRTC employees are made aware of 
their responsibilities for the proper management of personal information holdings. 
Responsible sectors are also required to consult with the ATIP Coordinator before 
collecting any personal information. 


The ATIP Coordinator must be notified where personal information in a personal 
information bank is used or disclosed for a use consistent with the purpose for which 
the information was obtained or compiled, but was not identified in the statement of 
consistent uses published in /nfo Source. 


Privacy Impact Assessment 


One Privacy Impact Assessment (PIA) was completed during this reporting period 
on the Ownership & Control (OWN) review process and systems. This PIA will be 
forwarded to the Office of the Privacy Commissioner (OPC) in the course of the new 
reporting period. 


In addition, an addendum to the existing PIA for the National Do-Not-Call-List 
Program (DNCL) was prepared which will also be forwarded to the OPC in the 
course of the new reporting period. 


As part of the Privacy Management Framework (PMF) project described above 
under the heading of “Administration”, PIA roles & responsibilities and procedures 
have been developed in the course of 2010-2011. The PMF will be completed and 


information sessions will be offered to CRTC staff in 2011-2012. 


Data matching and data sharing 


There were no data matching and data sharing activities during the report period. 


Disclosures Under Subsections 8(2)(e), (f), (g), and 
(m) of the Privacy Act 


There were no disclosures pursuant to subsections 8(2) (e), (f), (g) or (m) for the 
2010-2011 period. 


Costs 


During 2010-2011, the ATIP Office incurred an estimated $6,613 in salary cost and 
$58,800 in administrative costs. Administrative costs were incurred to hire a Privacy 
and Governance expert to help develop the OWN PIA and the Privacy Management 
Framework. 


Statistical Report of the Privacy Act 


The report can be found at Appendix B. 


Appendix A: Delegation Order 


Privacy Act Delegation Order 


I, the undersigned, Chalrman of the Canadian Radio-Television and 
Telecommunications Commission (CRTC), pursuant to section 73 of the Privacy 
Act*, hereby designate the person or persons holding the position or positions set 
out In the schedule hereto to exercise and perform the powers, dutles and functions 
of the Chairman, as the head of the government institution, under the sections of the 
Act set out in the attached schedule for each position. 


This Delegation Order supersedes all previous Delegation Orders with respect to the 


CRTC, or any portion thereof, 


Konrad von Finckensteln, Q.C. 
Chairman of the CRTC 
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Appendix B: Statistical Report 


Gouvernement 
du Canada 


Government 
of Canada 


i+ 


Institution 


television and Telecommunications Commission 


Conseil de la radiodiffusion et des télécommunications canadiennes / Canadian Radio- 


REPORT ON THE PRIVACY ACT 


RAPPORT CONCERNANT LA LOI SUR LA PROTECTION 
DES RENSEIGNEMENTS PERSONNELS 


Requosis under the Privacy Act/ 
Domandes en vartu do la Loi sur {a protection 
des renseignements personnois 


Received during reponing period / 

Regués pendant la période visée par le rappon 

Outslanding from previous period / 

En suspens depuis {a pénode aniérieura 

Completed during reporting pened 4 

Traitées pendant la période visées par le rapport 

Carried forward / 4 
Reponées 


Disposition of request complotod / 
Disposition à l'égard des domandes traltées 


All disciosed / 
Communication lols'e 


Disclosed in part / 
Communication panelle 


Nothing disclosed (excluded) / 
Aucune communication (exclusion) 


Nothing disclosed (exempt) / 
Aucune communication (exemption) 


Unable to process / 
Traitement impossible 


Abandonnad by applicant / 
Abandon de la demanda 


Transferred / 
Transmission 


i TOTAL 


Exemptions invoked / 
Exceptions invequées 


— 
— 


Ari 18(2) 


An. 19(1)(a) 


| 


= 
Cc 
= 


{c) 


=~ 
a 
~~ 


| 


Ant 20 


An 21 


Art 22(4)(a) 
(6) 


(c) 
An 22(2) 
s 
An. 23 (a) | d 
(b) 0 


a 


An. 24 


An 25 


An. 26 
Art 27 
An 28 
TBS/SCT 350-63 (Rev. 1999/03) 


AR a 


Reporting penod / Période visée par le rapoon 
2010-04-01 A/to 2011-03-31 


1 Exclusions cited / V 
Exciusions cliées 


Vv 

Ss. 
EPS 
S. 
usine aaa on 


Transtations / 
Traductions 


Il 
Translations requested / 
Traductions demandées 
Translations English to French / 
prepared / De l'anglais eu français 
French lo English / 
Du français à l'anglais 


Mothod of access / 
Méthode de consultation 


Copies given / 
Copies de l'onginsl 


| Examination / 0 
Examen de l'original | | 


Traductions 
préparées 


Copies and examination / 
Copies el examen 


Vv Completion time / 
Déjai de trattement 


30 days or under / 
30 jours ou moins 
31 to 60 days / 

De 31 à 60 jours 
61 to 120 days / 
De 61 à 120 jours 
121 days or over / 
121 jours ou plus 


Extentions / 
Prorogations des délais 


90 days or under / 
30 jours ou moins 


Corrections and notation / 
Corroctions of mention 


Costs/ 
Coûts 


Financial (ail reasons) / 1 
Financiers (raisons) i 


31 days or over { 
31 jours ou plus 


| 


{ Interference wilh x 
operations / 1 Salary? 
Interruption des } Traitamant $ 6.613 
opérations { 


Administration (O and M) / 
Administration {fonclornement 
et maintian) 


| Consultation 


$ 58,800 
Translation / 
Traduction ) 


$ 65,413 


| Person year utilization (all reasons) / 
i Années-personnes utilisées (raisons) 


; Person year (decimal format) / 
' Années-personnes (nombre 
| décmal) 
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Additional Reporting Requirements — Privacy Act 


Privacy Impact Assessment 


Number of Preliminary Privacy Impact Assessments initiated: 0 

Number of Preliminary Privacy Impact Assessments completed: 0 

Number of Privacy Impact Assessments initiated: 1 

Number of Privacy Impact Assessments completed: 2 

Number of Privacy Impact Assessments forwarded to the Office of the Privacy 
Commissioner (OPC): 0 


Part lll — Exemptions invoked 

The CRTC did not invoke any of the following exemptions during the reporting period: 
Subsections 19(1)(e) and (f); 22.1; 22.2; and, 22.3. 

Part IV — Exclusions cited 


The CRTC did not cite any of the following exclusions during the reporting period: 
Subsections 69.1; and, 70.1. 
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